TP-Link TD-W8960N

300Mbps Wireless N ADSL2+ Modem Router

Forum discussion here

OEM source code available at: TD-W8960Nv1.0_RELEASE_GPL_CODE.tar.gz

For TD-W8960N v5 see TP-Link TD-W8960N v5 and Plusnet 2704N V1

Supported Versions

Hardware Highlights

(for version 1 and version 3)

CPU Ram Flash Network Wireless NIC Wireless Standard USB Serial JTag ADSL2+ Modem
BCM6358@300MHz 32 MB 4 MB 4x 100mbps BCM4351 (onboard) b/g/n NO YES YES YES

Installation

→ Install OpenWrt (generic explanation)

NOTE: Using a stable build from LEDE 17.01.4 will work with your router but the WiFi drivers do not load with the firmware. Manually adding the drivers does not seem to work because the device loads incorrect drivers for the WiFi at the boot. (Tested with LEDE 17.01.4 - V3 router).

  1. Download the latest Stable (see table above) or Openwrt LEDE 17.01.4 and 'kmod-b43legacy' package for Wi-Fi drivers.
  2. Use a tftp CLIENT to upload the image (for example tftpd32.exe on windows)
  3. Give your PC a static IP and telnet the router
  4. Use the command: 
    tftp -g -t i -f openwrt-cfe.bin 192.168.1.100


    Where “openwrt-cfe.bin” is the filename and “192.168.1.100” is the IP of the PC where to get the file from tftp server (Thanks to mbo2o @ LEDE Forum for the firmware upload instructions)

  5. Wait for it to flash, router will reboot automatically and enter in recovery mode
  6. Go to http://192.168.1.1 and reflash the openwrt-96358VW2-generic-squashfs-cfe.bin image
  7. The router should now boot to openwrt

Alternative mode (you have to open the router case):

  1. Flash using a Serial TTL adapter and CFE bootloader.
  2. Setup a TFTP server on your computer.
  3. Using the serial connection, stop the boot process by pressing any key when asked
  4. Once you are on the CFE prompt do “flashimage hostip:image.bin” (example CFE > flashimage 192.168.1.2:firmware.bin)
  5. The device should automatically reboot to OpenWrt

Revert to original firmware

You will need an active serial connection!

  1. Download the latest firmware from the TP-LINK servers
  2. Using an hex-editor remove everything from offset 00000000 to 000001FF (this means that now the 1st character of the firmware is a 6 (or 36 in BIN))
  3. Save that modified original image
  4. Go to the CFE prompt and do “flashimage hostip:image.bin”
  5. The device should automatically reboot to original tplink firmware

Hardware

Info

Architecture MIPS
Vendor Broadcom
bootloader cfe
Board ID 96358VW2
System-On-Chip BCM6358
CPU/Speed BMIPS4350 V1.0 / 300 Mhz BMIPS Dual Core
Flash-Chip Spansion S25FL032A (on v1.3 hardware)
Flash size 4 MiB
RAM-Chip DDR-400
RAM size 32 MiB
Wireless Broadcom BCM4351 802.11b/g/n (onboard)
Ethernet Broadcom BCM5325 w/ vlan support swconfig
Internet ADSL2+
USB no
Serial Yes
JTAG Yes

Photos

td-w8960n_internal.jpg

How to open the case

TD-W8960N is a little tricky to open.

  1. Below 2 rubber feets there are 2 screws - remove them
  2. Using your hands and a small screwdriver, try to open the upper and lower part (both are white) so that you can grab the 2 black laterals and push them a little. Don't force it!
  3. Near the leds, there are 2 snaps. Using a flat screwdriver, try to open them from the inside. If you don't have space, check if the 2 antenna cables are stuck on any capacitor.
  4. The front part should be now loose and all you need is to pull the white upper cover.

Serial

→ port.serial general information about the serial port, serial port cable, etc.

Pin: TX,RX,GND,VCC (3.3v)

Don't connect VCC! Just use TX,RX and GND and then power on the device.
Also, you MUST short those 2 pads marked in yellow to enable serial RX and TX.
Don't forget that RX connects to the RS232TTL-TX and TX to the RS232TTL-RX!

Serial connection parameters
for TP-Link TD-W8960N 		115200, 8N1
Serial console username admin
Serial console password admin

JTAG

→ port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

Hardware mods

Because TD-W8960N is an unit that gets way too hot, adding 2 heatsinks is a good idea.

  1. Add 1 heatsink to the cpu (look at the above image, it's the big square chip on the center)
  2. Add 1 heatsink to the switch (also look at the above image, it's the left chip with “broadcom” written on it)

This should prevent any overheating signs.

TD-W8960N v1 can be upgraded to have 64MB RAM, DDR1 NP25D3216512K-5 is known to work under both the stock CFE and Rikka0w0's heavily patched CFE for BCM6358.

Rikka0w0's heavily patched CFE can also support 8MB and 16MB SPI flashes on the TD-W8960N v1, which enables the installation of the snapshot OpenWrt (as of November 2025).

Debug Logs

# cat /proc/cpuinfo system type : 96358VW2 processor : 0 cpu model : BCM6358 V1.0 BogoMIPS : 297.98 wait instruction : no microsecond timers : yes tlb_entries : 32 extra interrupt vector : no hardware watchpoint : no ASEs implemented : VCED exceptions : not available VCEI exceptions : not available unaligned exceptions : 8260 # cat /proc/mtd dev: size erasesize name mtd0: 00313000 00313000 "Physically mapped flash" # cat /proc/partitions major minor #blocks name 31 0 3148 mtdblock0 # cat /proc/meminfo MemTotal: 29820 kB MemFree: 9148 kB Buffers: 2320 kB Cached: 7860 kB SwapCached: 0 kB Active: 6868 kB Inactive: 6576 kB SwapTotal: 0 kB SwapFree: 0 kB Dirty: 0 kB Writeback: 0 kB AnonPages: 3276 kB Mapped: 2684 kB Slab: 3092 kB SReclaimable: 508 kB SUnreclaim: 2584 kB PageTables: 384 kB NFS_Unstable: 0 kB Bounce: 0 kB CommitLimit: 14908 kB Committed_AS: 7320 kB VmallocTotal: 1032148 kB VmallocUsed: 1732 kB VmallocChunk: 1029348 kB # cat /proc/version Linux version 2.6.21.5 (root@localhost.localdomain) (gcc version 4.2.3) #4 Fri Oct 28 18:30:25 CST 2011 --------------------------------------------------------------------- Logs at boot time (RS232ttl) CFE version 1.0.37-102.9 for BCM96358 (32bit,SP,BE) Build Date: äş 12ć 29 20:10:30 CST 2009 (root@localhost.localdomain) Copyright (C) 2000-2009 Broadcom Corporation. Serial flash device: name S25FL032A, id 0x0115, size 4096KB CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Boot Address 0xbfc00000 Param0 : 192.168.1.1:ffffff00 Param1 : 192.168.1.100 Param2 : Param3 : f Param4 : vmlinux Param5 : bcm963xx_fs_kernel Param6 : 1 Param7 : 0 Num = 8;gNumBootParams = 8 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-5) : 96358VW2 Number of MAC Addresses (1-32) : 11 Base MAC Address : 00:23:cd:##:##:## PSI Size (1-64) KBytes : 24 Main Thread Number [0|1] : 0 Device Pin : "#######" * * * Press any key to stop auto run (1 seconds) * * * Auto run second count down: 1 web info: Waiting for connection on socket 0. CFE> CFE> help Available commands: sm Set memory or registers. dm Dump memory or registers. w Write the whole image start from beginning of the flash e Erase [n]vram or [a]ll flash except bootrom r Run program from flash image or from host depend on [f/h] flag p Print boot line and board parameter info c Change booline parameters f Write image to the flash i Erase persistent storage data b Change board parameters reset Reset the board flashimage Flashes a compressed image after the bootloader. help Obtain help for CFE commands For more information about a command, enter 'help command-name' * * * command status = 0


Bootlogs

OEM bootlog of TP-Link TD-W8960N V1

Taken after upgrading the memory to 64MB, still with the stock 4MB flash and stock firmware.

CFE version 1.0.37-102.9 for BCM96358 (32bit,SP,BE) Build Date: 四 8月 5 09:42:18 CST 2010 (root@localhost.localdomain) Copyright (C) 2000-2009 Broadcom Corporation. Serial flash device: name W25X32V, id 0xef15, size 4096KB CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 67108864 bytes (64MB) Boot Address 0xbfc00000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-5) : 96358VW2 Number of MAC Addresses (1-32) : 11 Base MAC Address : 90:f6:52:48:f0:fc PSI Size (1-64) KBytes : 24 Main Thread Number [0|1] : 0 Device Pin : "93893466" *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xbfc10000) ... Code Address: 0x80010000, Entry Address: 0x80226000 Decompression OK! Entry at 0x80226000 Closing network. Closing DMA Channels. Starting program at 0x80226000 Linux version 2.6.21.5 (root@localhost.localdomain) (gcc version 4.2.3) #4 Fri Oct 28 18:30:25 CST 2011 Serial flash device: name W25X32V, id 0xef15, size 4096KB 96358VW2 prom init CPU revision is: 0002a010 Determined physical RAM map: memory: 03fa0000 @ 00000000 (usable) On node 0 totalpages: 16288 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 95 pages used for memmap Normal zone: 12097 pages, LIFO batch:1 Built 1 zonelists. Total pages: 16161 Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB, 2-way, linesize 16 bytes. Synthesized TLB refill handler (21 instructions). Synthesized TLB load handler fastpath (33 instructions). Synthesized TLB store handler fastpath (33 instructions). Synthesized TLB modify handler fastpath (32 instructions). PID hash table entries: 256 (order: 8, 1024 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 62156k/65152k available (1809k kernel code, 2980k reserved, 322k data, 88k init, 0k highmem) KLOB Pool 1 Initialized: 1048576 bytes <0x80300000 ... 0x80400000> Calibrating delay loop... 297.98 BogoMIPS (lpj=148992) Mount-cache hash table entries: 512 NET: Registered protocol family 16 Total Flash size: 4096K with 64 sectors File system address: 0xbfc10100 registering PCI controller with io_map_base unset BLOG v1.0 Initialized NET: Registered protocol family 8 NET: Registered protocol family 20 Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro io scheduler noop registered (default) PPP generic driver version 2.4.2 NET: Registered protocol family 24 bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry SES: Button Interrupt 0x3 is enabled SES: LED GPIO 0x4 is enabled irq.c: reset_fac_irq is set to low_trigger. Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX bcmxtmrt: Broadcom BCM6358A1 ATM Network Device v0.1 Apr 10 2011 18:09:46 Mirror/redirect action on u32 classifier Actions configured TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 88k freed init started: BusyBox v1.00 (2011.04.10-10:17+0000) multi-call binary BusyBox v1.00 (2011.04.10-10:17+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... pktflow: module license 'Proprietary' taints kernel. Broadcom Packet Flow Cache learning via BLOG enabled. Created Proc FS /procfs/fcache Constructed Broadcom Packet Flow Cache v0.1 Feb 26 2009 14:21:08 bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6358A1 Ethernet Network Device v0.3 Apr 10 2011 18:09:31 Config Ethernet Switch Through MDIO Pseudo PHY Interface ethsw: found bcm5325e! dgasp: kerSysRegisterDyingGaspHandler: eth0 registered rate ctrl page 0x35, addr 0x02: 0 8021x_1 page 0x0A, addr 0x4C: 0 8021x_2 page 0x0A, addr 0x4E: 0 eth0: MAC Address: 90:F6:52:48:F0:FC PCI: Enabling device 0000:00:01.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:01.0 to 64 wl0: Broadcom BCM4351 802.11 Wireless Controller 5.10.85.0.cpe4.402.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered ===== Release Version 4.02L.03 (build timestamp 111108_1113) ===== eth0 Link UP. wl_cnt= 1 rcl_tCObject Enter... rcl_tCObject add/startup device eth0 is not a slave of br0 device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state WLmngr Daemon is running optarg=0 shmId=0 device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state BcmAdsl_Initialize=0xC006B1F8, g_pFnNotifyCallback=0xC0088744 AnnexCParam=0x00000000 AnnexAParam=0x00000980 adsl2=0x00000000 KLOB extended to 2 pools pSdramPHY=0xA3FFFFF8, 0x870A5223 0x386C2405 AdslCoreSharedMemInit: shareMemAvailable=21712 AdslCoreHwReset: AdslOemDataAddr = 0xA3FEF96C AnnexCParam=0x00000000 AnnexAParam=0x00000980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered KLOB extended to 3 pools KLOB extended to 4 pools KLOB extended to 5 pools KLOB extended to 6 pools KLOB extended to 7 pools KLOB extended to 8 pools bcmxtmrt: MAC address: 90 f6 52 48 f0 fd pppoe_info:ppp0 -i atm0 -u davidctan -p 2014abcd -f 0 -t 1480 recovered previous ppp session info ppp0(ccef48620e20/97d7) bridge: can't decode speed from atm0: 0 device atm0 entered promiscuous mode br0: port 3(atm0) entering learning state br0: topology change detected, propagating br0: port 3(atm0) entering forwarding state pppoe_info:ebtables -t nat -I POSTROUTING 1 -o atm0 -p ! 0x8863 -j poebratm0 >/dev/null wlctl -i wl0 phytype > /var/wl0 wlctl -i wl0 revinfo > /var/wl0 wlctl -i wl0 bands > /var/wl0bands wlctl ver > /var/wlver wlctl -i wl0 cap > /var/wl0cap device wl0 left promiscuous mode br0: port 2(wl0) entering disabled state device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state interface wl0.1 does not exist! interface wl0.2 does not exist! interface wl0.3 does not exist! br0: port 2(wl0) entering disabled state WPS Device PIN = 93893466 wlctl -i wl0 phy_watchdog 0 wlctl -i wl0 wds none wlctl -i wl0 up wlctl -i wl0 down wlctl -i wl0 mbss 0 wlctl -i wl0 bss -C 0 down wlctl -i wl0 bss -C 1 down wlctl -i wl0 bss -C 2 down wlctl -i wl0 bss -C 3 down wlctl -i wl0 ssid -C 0 'x''i''a''o''k''a''o''l''a' Setting SSID "xiaokaola" wlctl -i wl0 ssid -C 1 'w''l''0''_''G''u''e''s''t''1' Setting SSID "wl0_Guest1" wlctl -i wl0 ssid -C 2 'w''l''0''_''G''u''e''s''t''2' Setting SSID "wl0_Guest2" wlctl -i wl0 ssid -C 3 'w''l''0''_''G''u''e''s''t''3' Setting SSID "wl0_Guest3" wlctl -i wl0 cur_etheraddr 90:F6:52:48:F0:FC 2>/dev/null wlctl -i wl0.1 cur_etheraddr 90:F6:52:48:F0:FC 2>/dev/null wlctl -i wl0.2 cur_etheraddr 90:F6:52:48:F0:FC 2>/dev/null wlctl -i wl0.3 cur_etheraddr 90:F6:52:48:F0:FC 2>/dev/null wlctl -i wl0 ap 1 wlctl -i wl0 infra 1 wlctl -i wl0 closed 0 wlctl -i wl0 country AU wlctl -i wl0 band b wlctl -i wl0 regulatory 0 wlctl -i wl0 radar 0 2>/dev/null wlctl -i wl0 spect 0 2>/dev/null wlctl -i wl0 nmode -1 wlctl -i wl0 mimo_bw_cap 1 wlctl -i wl0 chanspec -c 6 -b 2 -w 40 -s -1 Chanspec set to 0x2d06 wlctl -i wl0 wpa_cap -C 0 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 0 0 2>/dev/null wlctl -i wl0 wpa_cap -C 1 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 1 0 2>/dev/null wlctl -i wl0 wpa_cap -C 2 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 2 0 2>/dev/null wlctl -i wl0 wpa_cap -C 3 > /var/wpa_cap0 wlctl: Unsupported wlctl -i wl0 wpa_cap -C 3 0 2>/dev/null wlctl -i wl0 maxassoc 50 wlctl -i wl0 bss_maxassoc 50 wlctl -i wl0 gmode Auto wlctl -i wl0 gmode_protection_override -1 wlctl -i wl0 gmode_protection_control 2 wlctl -i wl0 nmode_protection_override -1 wlctl -i wl0 protection_control 2 wlctl -i wl0 nreqd 0 wlctl -i wl0 wme 0 2>/dev/null wlctl -i wl0 afterburner_override 0 2>/dev/null wlctl -i wl0 ampdu 1 wlctl -i wl0 amsdu 1 wlctl -i wl0 afterburner_override 0 wlctl -i wl0 wme 1 2>/dev/null wlctl -i wl0 wme_noack 0 2>/dev/null wlctl -i wl0 wme_apsd 1 2>/dev/null wlctl -i wl0 wme_bss_disable 0 wlctl -i wl0 rate 0 wlctl -i wl0 bg_rate 0 wlctl -i wl0 leddc 0 2>/dev/null wlctl -i wl0 mrate -1 wlctl -i wl0 bg_mrate -1 wlctl -i wl0 rateset default wlctl -i wl0 rtsthresh 2347 wlctl -i wl0 fragthresh 2346 wlctl -i wl0 dtim 1 wlctl -i wl0 bi 100 wlctl -i wl0 frameburst 1 wlctl -i wl0 ap_isolate 0 wlctl -i wl0 pwr_percent 100 wlctl -i wl0 wmf_bss_enable 0 wlctl -i wl0.1 wmf_bss_enable 0 wlctl -i wl0.2 wmf_bss_enable 0 wlctl -i wl0.3 wmf_bss_enable 0 wlctl -i wl0 mac none wlctl -i wl0 macmode 0 wlctl -i wl0 up wlctl -i wl0 csscantimer 0 wlctl -i wl0 chanspec > /var/curchaspec0 br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state device wl0 left promiscuous mode br0: port 2(wl0) entering disabled state device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state device wl0.1 is not a slave of br0 device wl0.2 is not a slave of br0 device wl0.3 is not a slave of br0 Reaped 452 UPnP::upnp_init:UPnP daemon is ready to run UPnP::upnp_request_handler:UPNP_CMD_DEV_ADD UPnP::upnp_device_attach:br0: attach WFADevice.xml UPnP::upnp_request_handler:Device command. BCM96358 xDSL Router Login: admin Password: > ps && sh PID Uid VmSize Stat Command 1 admin 316 S init 2 admin SW [softirq-high/0] 3 admin SW [softirq-timer/0] 4 admin SW [softirq-net-tx/] 5 admin SW [softirq-net-rx/] 6 admin SW [softirq-block/0] 7 admin SW [softirq-tasklet] 8 admin SW [softirq-sched/0] 9 admin SW [softirq-rcu/0] 10 admin SW< [events/0] 11 admin SW< [khelper] 12 admin SW< [kthread] 21 admin SW< [kblockd/0] 35 admin SW [pdflush] 36 admin SW [pdflush] 37 admin SWN [kswapd0] 38 admin SW< [aio/0] 39 admin SW< [cifsoplockd] 40 admin SW< [cifsdnotifyd] 51 admin SW [mtdblockd] 63 admin 364 S -sh 97 admin SW [bcmsw] 114 admin 620 S smd 115 admin 1264 S ssk 128 admin 276 S sntp -s clock.fmt.he.net -s ntp1.tummy.com -t Canberr 129 admin 284 S dhcpd 159 admin 1364 S wlmngr -m 0 193 admin 432 S pppd -c ppp0 -i atm0 -u davidctan -p ******** -f 0 -t 307 admin 200 S dsldiagd 308 admin 572 S tddp -m 0 453 admin 344 S /bin/bcmupnp -D 459 admin 236 S /bin/lld2d br0 461 admin 188 S /bin/eapd 465 admin 208 S /bin/nas 467 admin 524 S /bin/wps_monitor 478 admin 656 S consoled 479 admin 320 S sh -c ps && sh 480 admin 304 R ps BusyBox v1.00 (2011.04.10-10:17+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. # ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: ifb0: <BROADCAST,NOARP> mtu 1500 qdisc noop qlen 32 link/ether 2a:a7:45:ed:6e:be brd ff:ff:ff:ff:ff:ff 3: ifb1: <BROADCAST,NOARP> mtu 1500 qdisc noop qlen 32 link/ether 0a:15:28:da:84:b4 brd ff:ff:ff:ff:ff:ff 4: dsl0: <> mtu 0 qdisc noop link/[29] 5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff 6: wl0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff 7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff inet 192.168.0.1/24 brd 192.168.0.255 scope global br0 8: atm0: <MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 90:f6:52:48:f0:fd brd ff:ff:ff:ff:ff:ff 9: wl0.1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff 10: wl0.2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff 11: wl0.3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000 link/ether 90:f6:52:48:f0:fc brd ff:ff:ff:ff:ff:ff #

OpenWrt bootlog of TP-Link TD-W8960N V1

Taken after upgrading the memory to 64MB. A custom-built CFE and OpenWrt are installed to a 16MB SPI flash.

CFE version 1.0.37-6.4 for BCM96358 (32bit,SP,BE) Build Date: Tue Nov 11 05:50:25 AEDT 2025 (rikka@i9-13900ks-wsl) Copyright (C) 2000-2005 Broadcom Corporation. Heavily patched by Rikka0w0 for use with OpenWrt in 2025. Source code: https://github.com/rikka0w0/cfe-bcm6358 Boot Address 0xbfc00000 Initializing Arena. Initializing Devices. Serial flash device: name GD25Q128, id 0xc817, size 16384KB CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz Total memory: 67108864 bytes (64MB) Total memory used by CFE: 0x80401000 - 0x80525EC0 (1199808) Initialized Data: 0x8041D9F0 - 0x8041F5D0 (7136) BSS Area: 0x8041F5D0 - 0x80423EC0 (18672) Local Heap: 0x80423EC0 - 0x80523EC0 (1048576) Stack Area: 0x80523EC0 - 0x80525EC0 (8192) Text (code) segment: 0x80401000 - 0x8041D9E4 (117220) Boot area (physical): 0x00526000 - 0x00566000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.10 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id Name : 96358VW2 Psi size in KB : 24 Number of MAC Addresses (1-32) : 4 Base MAC Address : 00:11:22:33:44:55 Ethernet PHY Type : Internal Memory size in MB : 64 CMT Thread Number : 1 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 flash_get_total_memory_mapped_size()=0x00000000, flash_get_total_size()=0x01000000 Code Address: 0x81000000, Entry Address: 0x81000000 Decompression OK! Entry at 0x81000000 Closing network. Starting program at 0x81000000 [ 0.000000] Linux version 6.12.57 (rikka@i9-13900ks-wsl) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 14.3.0 r31632+1-130306fab9) 14.3.0, GNU ld (GNU Binutils) 2.44) #0 SMP Tue Nov 11 14:36:10 2025 [ 0.000000] CPU0 revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] MIPS: machine is TP-Link TD-W8960N v1 [ 0.000000] 64MB of RAM installed [ 0.000000] earlycon: bcm63xx_uart0 at MMIO 0xfffe0100 (options '115200n8') [ 0.000000] printk: legacy bootconsole [bcm63xx_uart0] enabled [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT [ 0.000000] Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] percpu: Embedded 12 pages/cpu s19664 r8192 d21296 u49152 [ 0.000000] Kernel command line: earlycon [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16384 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1. [ 0.000000] NR_IRQS: 256 [ 0.000000] irq_bcm6345_l1: registered BCM6345 L1 intc (IRQs: 32) [ 0.000000] irq_bcm6345_l1: CPU0 (irq = 2) [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000] brcm,bcm6358 detected @ 300 MHz [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 12741736309 ns [ 0.000007] sched_clock: 32 bits at 150MHz, resolution 6ns, wraps every 14316557820ns [ 0.008417] Calibrating delay loop... 298.59 BogoMIPS (lpj=1492992) [ 0.084896] pid_max: default: 32768 minimum: 301 [ 0.131876] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.139497] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.193436] rcu: Hierarchical SRCU implementation. [ 0.198480] rcu: Max phase no-delay instances is 1000. [ 0.210389] smp: Bringing up secondary CPUs ... [ 0.215059] smp: Brought up 1 node, 1 CPU [ 0.219920] Memory: 52392K/65536K available (7939K kernel code, 659K rwdata, 1704K rodata, 1272K init, 220K bss, 12524K reserved, 0K cma-reserved) [ 0.253628] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.264067] futex hash table entries: 256 (order: 2, 16384 bytes, linear) [ 0.297303] pinctrl core: initialized pinctrl subsystem [ 0.315086] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.382870] clocksource: Switched to clocksource MIPS [ 0.433363] NET: Registered PF_INET protocol family [ 0.439503] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.450315] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.459201] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.467373] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.475571] TCP bind hash table entries: 1024 (order: 2, 16384 bytes, linear) [ 0.483336] TCP: Hash tables configured (established 1024 bind 1024) [ 0.493038] MPTCP token hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.501344] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.508381] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.518847] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.525030] PCI: CLS 0 bytes, default 16 [ 0.548097] workingset: timestamp_bits=14 max_order=14 bucket_order=0 [ 0.565951] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.571994] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.616295] fffe0100.serial: ttyS0 at MMIO 0xfffe0100 (irq = 8, base_baud = 1562500) is a bcm63xx_uart [ 0.626147] printk: legacy console [ttyS0] enabled [ 0.626147] printk: legacy console [ttyS0] enabled [ 0.636126] printk: legacy bootconsole [bcm63xx_uart0] disabled [ 0.636126] printk: legacy bootconsole [bcm63xx_uart0] disabled [ 0.724774] 3 fixed-partitions partitions found on MTD device spi0.0 [ 0.731438] OF: Bad cell count for /ubus/spi@fffe0800/flash@0/partitions [ 0.738751] OF: Bad cell count for /ubus/spi@fffe0800/flash@0/partitions [ 0.746705] Creating 3 MTD partitions on "spi0.0": [ 0.751675] 0x000000000000-0x000000010000 : "cfe" [ 0.766365] OF: Bad cell count for /ubus/spi@fffe0800/flash@0/partitions [ 0.774435] 0x000000010000-0x000000ff0000 : "firmware" [ 0.790969] mtdsplit_bcm63xx: CFE image tag found at 0x0 with version 6, board type 96358VW2 [ 0.800504] 2 bcm63xx-fw partitions found on MTD device firmware [ 0.806968] Creating 2 MTD partitions on "firmware": [ 0.812241] 0x000000000100-0x00000030c3d4 : "kernel" [ 0.817503] mtd: partition "kernel" doesn't start on an erase/write block boundary -- force read-only [ 0.833390] 0x00000030c3d4-0x000000fe0000 : "rootfs" [ 0.838523] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only [ 0.854224] mtd: setting mtd3 (rootfs) as root device [ 0.860409] 1 squashfs-split partitions found on MTD device rootfs [ 0.867114] 0x000000750000-0x000000fe0000 : "rootfs_data" [ 0.879172] 0x000000ffa000-0x000001000000 : "nvram" [ 0.905544] bcm63xx-spi fffe0800.spi: at [mem 0xfffe0800-0xfffe0f0b flags 0x200] (irq 9, FIFOs size 542) [ 1.002895] bcm6348-iudma fffe5000.dma: bcm6348-iudma @ 0xfffe5000 [ 1.010755] bcm6348-emac fffe4800.ethernet: mtd mac 00:11:22:33:44:55 [ 1.021917] bcm53xx fffe4800.ethernet-mii:1e: found switch: BCM5325, rev 0 [ 1.029582] bcm6348-emac fffe4800.ethernet: MDIO bus init [ 1.046699] bcm6348-emac fffe4800.ethernet: eth0 at 0xfffe4800, IRQ 10 [ 1.058238] bcm7038-wdt fffe005c.watchdog: Registered BCM7038 Watchdog [ 1.071243] NET: Registered PF_INET6 protocol family [ 1.103602] Segment Routing with IPv6 [ 1.107726] In-situ OAM (IOAM) with IPv6 [ 1.112256] NET: Registered PF_PACKET protocol family [ 1.119052] 8021q: 802.1Q VLAN Support v1.8 [ 1.353929] PCI host bridge to bus 0000:00 [ 1.358176] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff] [ 1.365472] pci_bus 0000:00: root bus resource [io 0x8000000-0x800ffff] [ 1.372404] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 1.380983] pci 0000:00:01.0: [14e4:4351] type 00 class 0x028000 conventional PCI endpoint [ 1.391793] pci 0000:00:01.0: BAR 0 [mem 0x00000000-0x00003fff] [ 1.404415] pci 0000:00:01.0: supports D1 D2 [ 1.408834] pci 0000:00:01.0: PME# supported from D0 D3hot D3cold [ 1.418806] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00 [ 1.425843] pci 0000:00:01.0: BAR 0 [mem 0x30000000-0x30003fff]: assigned [ 1.435679] bcm53xx fffe4800.ethernet-mii:1e: found switch: BCM5325, rev 0 [ 1.511616] bcm53xx fffe4800.ethernet-mii:1e: configuring for fixed/internal link mode [ 1.522225] bcm53xx fffe4800.ethernet-mii:1e lan4 (uninitialized): PHY [dsa-0.0:00] driver [Generic PHY] (irq=POLL) [ 1.539030] bcm53xx fffe4800.ethernet-mii:1e lan3 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY] (irq=POLL) [ 1.555917] bcm53xx fffe4800.ethernet-mii:1e lan2 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY] (irq=POLL) [ 1.573037] bcm53xx fffe4800.ethernet-mii:1e lan1 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY] (irq=POLL) [ 1.589955] bcm6348-emac fffe4800.ethernet eth0: entered promiscuous mode [ 1.597381] DSA: tree 0 setup [ 1.602080] bcm53xx fffe4800.ethernet-mii:1e: Link is Up - 100Mbps/Full - flow control off [ 1.629818] clk: Disabling unused clocks [ 1.745763] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 1.770859] Freeing unused kernel image (initmem) memory: 1272K [ 1.777150] This architecture does not have kernel memory protection. [ 1.783917] Run /sbin/init as init process [ 7.814806] init: Console is alive [ 7.819416] init: - watchdog - [ 16.950827] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 17.307833] b43-pci-bridge 0000:00:01.0: enabling device (0000 -> 0002) [ 17.354181] ssb: Found chip with id 0xA8D6, rev 0x00 and package 0x08 [ 17.455685] b43-pci-bridge 0000:00:01.0: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 17.474536] gpio_button_hotplug: loading out-of-tree module taints kernel. [ 17.509186] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 17.529019] init: - preinit - [ 25.292992] random: crng init done [ 26.058179] bcm53xx fffe4800.ethernet-mii:1e lan1: configuring for phy/mii link mode [ 26.067062] bcm6348-emac fffe4800.ethernet: eth0: phy link UP mii/100Mbps/Full/off Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 32.260619] jffs2: notice: (394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 1 orphan) and 8 of xref (1 dead, 0 orphan) found. [ 32.298579] mount_root: switching to jffs2 overlay [ 32.422961] overlayfs: upper fs does not support tmpfile. [ 32.538374] urandom-seed: Seeding with /etc/urandom.seed [ 33.117850] procd: - early - [ 33.121658] procd: - watchdog - [ 33.977621] procd: - watchdog - [ 34.256144] procd: - ubus - [ 34.842057] procd: - init - Please press Enter to activate this console. [ 38.996092] kmodloader: loading kernel modules from /etc/modules.d/* [ 42.913904] urngd: v1.0.2 started. [ 43.265259] Loading modules backported from Linux version v6.16-0-g038d61fd6422 [ 43.273008] Backport generated by backports.git v6.1.145-1-47-g6194bf852a3e [ 47.866951] PPP generic driver version 2.4.2 [ 47.883773] NET: Registered PF_PPPOX protocol family [ 48.214043] b43-phy0: Broadcom 43222 WLAN found (core revision 16) [ 48.277083] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 6 [ 48.283517] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2056, Revision 6, Version 0 [ 48.308962] Broadcom 43xx driver loaded [ Features: PNL ] [ 48.351467] kmodloader: done loading kernel modules from /etc/modules.d/* [ 100.524359] bcm6348-emac fffe4800.ethernet: eth0: phy link DOWN mii/100Mbps/Full/off [ 100.652158] bcm6348-emac fffe4800.ethernet: eth0: phy link UP mii/100Mbps/Full/off [ 100.712705] bcm53xx fffe4800.ethernet-mii:1e lan1: configuring for phy/mii link mode [ 100.752698] switch: port 1(lan1) entered blocking state [ 100.758423] switch: port 1(lan1) entered disabled state [ 100.764116] bcm53xx fffe4800.ethernet-mii:1e lan1: entered allmulticast mode [ 100.771416] bcm6348-emac fffe4800.ethernet eth0: entered allmulticast mode [ 100.794661] bcm53xx fffe4800.ethernet-mii:1e lan1: entered promiscuous mode [ 101.175005] bcm53xx fffe4800.ethernet-mii:1e lan2: configuring for phy/mii link mode [ 101.183668] 8021q: adding VLAN 0 to HW filter on device lan2 [ 101.264993] switch: port 2(lan2) entered blocking state [ 101.270416] switch: port 2(lan2) entered disabled state [ 101.276113] bcm53xx fffe4800.ethernet-mii:1e lan2: entered allmulticast mode [ 101.287676] bcm53xx fffe4800.ethernet-mii:1e lan2: entered promiscuous mode [ 101.611896] bcm53xx fffe4800.ethernet-mii:1e lan3: configuring for phy/mii link mode [ 101.620736] 8021q: adding VLAN 0 to HW filter on device lan3 [ 101.695110] switch: port 3(lan3) entered blocking state [ 101.700533] switch: port 3(lan3) entered disabled state [ 101.706589] bcm53xx fffe4800.ethernet-mii:1e lan3: entered allmulticast mode [ 101.806857] bcm53xx fffe4800.ethernet-mii:1e lan3: entered promiscuous mode [ 102.029772] bcm53xx fffe4800.ethernet-mii:1e lan4: configuring for phy/mii link mode [ 102.038616] 8021q: adding VLAN 0 to HW filter on device lan4 [ 102.154922] switch: port 4(lan4) entered blocking state [ 102.160341] switch: port 4(lan4) entered disabled state [ 102.166193] bcm53xx fffe4800.ethernet-mii:1e lan4: entered allmulticast mode [ 102.287117] bcm53xx fffe4800.ethernet-mii:1e lan4: entered promiscuous mode [ 103.304421] bcm53xx fffe4800.ethernet-mii:1e lan2: Link is Up - 100Mbps/Full - flow control off [ 103.313832] switch: port 2(lan2) entered blocking state [ 103.319252] switch: port 2(lan2) entered forwarding state BusyBox v1.37.0 (2025-11-07 14:23:25 UTC) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r31708-aed8903b05 ----------------------------------------------------- d=== WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- OpenWrt recently switched to the "apk" package manager! OPKG Command APK Equivalent Description ------------------------------------------------------------------ opkg install <pkg> apk add <pkg> Install a package opkg remove <pkg> apk del <pkg> Remove a package opkg upgrade apk upgrade Upgrade all packages opkg files <pkg> apk info -L <pkg> List package contents opkg list-installed apk info List installed packages opkg update apk update Update package lists opkg search <pkg> apk search <pkg> Search for packages ------------------------------------------------------------------ For more https://openwrt.org/docs/guide-user/additional-software/opkg-to-apk-cheatsheet root@OpenWrt:~# df -h Filesystem Size Used Available Use% Mounted on /dev/root 4.3M 4.3M 0 100% /rom tmpfs 26.5M 192.0K 26.3M 1% /tmp /dev/mtdblock4 8.6M 356.0K 8.2M 4% /overlay overlayfs:/overlay 8.6M 356.0K 8.2M 4% / tmpfs 512.0K 0 512.0K 0% /dev root@OpenWrt:~# free total used free shared buff/cache available Mem: 54284 14972 22292 192 17020 18420 Swap: 0 0 0 root@OpenWrt:~# mount /dev/root on /rom type squashfs (ro,relatime,errors=continue) proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate) tmpfs on /tmp type tmpfs (rw,nosuid,nodev,noatime) /dev/mtdblock4 on /overlay type jffs2 (rw,noatime) overlayfs:/overlay on / type overlay (rw,noatime,lowerdir=/,upperdir=/overlay/upper,workdir=/overlay/work) tmpfs on /dev type tmpfs (rw,nosuid,noexec,noatime,size=512k,mode=755) devpts on /dev/pts type devpts (rw,nosuid,noexec,noatime,mode=600,ptmxmode=000) debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,noatime) bpffs on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,noatime,mode=700) root@OpenWrt:~#

OEM bootlog

CFE> Booting from only image (0xbfc10000) ... Code Address: 0x80010000, Entry Address: 0x8021a000 Decompression OK! Entry at 0x8021a000 Closing network. Closing DMA Channels. Starting program at 0x8021a000 Linux version 2.6.21.5 (root@localhost.localdomain) (gcc version 4.2.3) #2 Wed Aug 25 17:14:28 CST 2010 Serial flash device: name S25FL032A, id 0x0115, size 4096KB 96358VW2 prom init CPU revision is: 0002a010 Determined physical RAM map: memory: 01fa0000 @ 00000000 (usable) On node 0 totalpages: 8096 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 31 pages used for memmap Normal zone: 3969 pages, LIFO batch:0 Built 1 zonelists. Total pages: 8033 Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB, 2-way, linesize 16 bytes. Synthesized TLB refill handler (21 instructions). Synthesized TLB load handler fastpath (33 instructions). Synthesized TLB store handler fastpath (33 instructions). Synthesized TLB modify handler fastpath (32 instructions). PID hash table entries: 128 (order: 7, 512 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 29732k/32384k available (1762k kernel code, 2652k reserved, 321k data, 88k init, 0k highmem) KLOB Pool 1 Initialized: 1048576 bytes Calibrating delay loop... 297.98 BogoMIPS (lpj=148992) Mount-cache hash table entries: 512 NET: Registered protocol family 16 Total Flash size: 4096K with 64 sectors File system address: 0xbfc10100 registering PCI controller with io_map_base unset BLOG v1.0 Initialized NET: Registered protocol family 8 NET: Registered protocol family 20 Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro io scheduler noop registered (default) PPP generic driver version 2.4.2 NET: Registered protocol family 24 bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry SES: Button Interrupt 0x3 is enabled SES: LED GPIO 0x4 is enabled irq.c: reset_fac_irq is set to low_trigger. Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX bcmxtmrt: Broadcom BCM6358A1 ATM Network Device v0.1 Aug 25 2010 17:14:19 TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 88k freed init started: BusyBox v1.00 (2010.08.12-01:27+0000) multi-call binary BusyBox v1.00 (2010.08.12-01:27+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... pktflow: module license 'Proprietary' taints kernel. Broadcom Packet Flow Cache learning via BLOG enabled. Created Proc FS /procfs/fcache Constructed Broadcom Packet Flow Cache v0.1 Feb 26 2009 14:21:08 bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6358A1 Ethernet Network Device v0.3 Aug 25 2010 17:14:08 Config Ethernet Switch Through MDIO Pseudo PHY Interface ethsw: found bcm5325e! dgasp: kerSysRegisterDyingGaspHandler: eth0 registered rate ctrl page 0x35, addr 0x02: 0 8021x_1 page 0x0A, addr 0x4C: 0 8021x_2 page 0x0A, addr 0x4E: 0 eth0: MAC Address: 00:23:CD:20:16:FF PCI: Enabling device 0000:00:01.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:01.0 to 64 wl0: Broadcom BCM4351 802.11 Wireless Controller 5.10.85.0.cpe4.402.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered ===== Release Version 4.02L.03 (build timestamp 100825_1906) ===== wl_cnt= 1 device eth0 is not a slave of br0 device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state WLmngr Daemon is running optarg=0 shmId=0 device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state BcmAdsl_Initialize=0xC006B1F8, g_pFnNotifyCallback=0xC0088744 AnnexCParam=0x00000000 AnnexAParam=0x00000980 adsl2=0x00000000 KLOB extended to 2 pools pSdramPHY=0xA1FFFFF8, 0xBE9A 0xDEADBEEF AdslCoreSharedMemInit: shareMemAvailable=21712 AdslCoreHwReset: AdslOemDataAddr = 0xA1FEF96C AnnexCParam=0x00000000 AnnexAParam=0x00000980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered KLOB extended to 3 pools KLOB extended to 4 pools KLOB extended to 5 pools KLOB extended to 6 pools KLOB extended to 7 pools KLOB extended to 8 pools wlctl -i wl0 phytype > /var/wl0 wlctl -i wl0 revinfo > /var/wl0 wlctl -i wl0 bands > /var/wl0bands wlctl ver > /var/wlver wlctl -i wl0 cap > /var/wl0cap device wl0 left promiscuous mode br0: port 2(wl0) entering disabled state device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state interface wl0.1 does not exist! interface wl0.2 does not exist! interface wl0.3 does not exist! Scratch pad is not initialized. br0: port 2(wl0) entering disabled state WPS Device PIN = 23402034 wlctl -i wl0 phy_watchdog 0 wlctl -i wl0 wds none wlctl -i wl0 up wlctl -i wl0 down wlctl -i wl0 mbss 0 wlctl -i wl0 bss -C 0 down wlctl -i wl0 bss -C 1 down wlctl -i wl0 bss -C 2 down wlctl -i wl0 bss -C 3 down wlctl -i wl0 ssid -C 0 's''k''y' Setting SSID "sky" wlctl -i wl0 ssid -C 1 'w''l''0''_''G''u''e''s''t''1' Setting SSID "wl0_Guest1" wlctl -i wl0 ssid -C 2 'w''l''0''_''G''u''e''s''t''2' Setting SSID "wl0_Guest2" wlctl -i wl0 ssid -C 3 'w''l''0''_''G''u''e''s''t''3' Setting SSID "wl0_Guest3" wlctl -i wl0 cur_etheraddr 00:23:CD:20:16:FF 2>/dev/null wlctl -i wl0.1 cur_etheraddr 00:23:CD:20:16:FF 2>/dev/null wlctl -i wl0.2 cur_etheraddr 00:23:CD:20:16:FF 2>/dev/null wlctl -i wl0.3 cur_etheraddr 00:23:CD:20:16:FF 2>/dev/null wlctl -i wl0 ap 1 wlctl -i wl0 infra 1 wlctl -i wl0 closed 0 wlctl -i wl0 country PL wlctl -i wl0 band b wlctl -i wl0 regulatory 0 wlctl -i wl0 radar 0 2>/dev/null wlctl -i wl0 spect 0 2>/dev/null wlctl -i wl0 nmode -1 wlctl -i wl0 mimo_bw_cap 1 wlctl -i wl0 chanspec -c 7 -b 2 -w 40 -s -1 Chanspec set to 0x2d07 wlctl -i wl0 wpa_cap -C 0 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 0 0 2>/dev/null wlctl -i wl0 wpa_cap -C 1 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 1 0 2>/dev/null wlctl -i wl0 wpa_cap -C 2 > /var/wpa_cap0 wlctl -i wl0 wpa_cap -C 2 0 2>/dev/null wlctl -i wl0 wpa_cap -C 3 > /var/wpa_cap0 wlctl: Unsupported wlctl -i wl0 wpa_cap -C 3 0 2>/dev/null wlctl -i wl0 maxassoc 50 wlctl -i wl0 bss_maxassoc 50 wlctl -i wl0 gmode Auto wlctl -i wl0 gmode_protection_override -1 wlctl -i wl0 gmode_protection_control 2 wlctl -i wl0 nmode_protection_override -1 wlctl -i wl0 protection_control 2 wlctl -i wl0 nreqd 0 wlctl -i wl0 wme 0 2>/dev/null wlctl -i wl0 afterburner_override 0 2>/dev/null wlctl -i wl0 ampdu 1 wlctl -i wl0 amsdu 1 wlctl -i wl0 afterburner_override 0 wlctl -i wl0 wme 1 2>/dev/null wlctl -i wl0 wme_noack 0 2>/dev/null wlctl -i wl0 wme_apsd 1 2>/dev/null wlctl -i wl0 wme_bss_disable 0 wlctl -i wl0 rate 0 wlctl -i wl0 bg_rate 0 wlctl -i wl0 leddc 0 2>/dev/null wlctl -i wl0 mrate -1 wlctl -i wl0 bg_mrate -1 wlctl -i wl0 rateset default wlctl -i wl0 rtsthresh 2347 wlctl -i wl0 fragthresh 2346 wlctl -i wl0 dtim 1 wlctl -i wl0 bi 100 wlctl -i wl0 frameburst 1 wlctl -i wl0 ap_isolate 0 wlctl -i wl0 pwr_percent 100 wlctl -i wl0 wmf_bss_enable 0 wlctl -i wl0.1 wmf_bss_enable 0 wlctl -i wl0.2 wmf_bss_enable 0 wlctl -i wl0.3 wmf_bss_enable 0 wlctl -i wl0 mac none wlctl -i wl0 macmode 0 wlctl -i wl0 up wlctl -i wl0 csscantimer 0 wlctl -i wl0 chanspec > /var/curchaspec0 br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state device wl0 left promiscuous mode br0: port 2(wl0) entering disabled state device wl0 is not a slave of br0 device wl0 entered promiscuous mode br0: port 2(wl0) entering learning state br0: topology change detected, propagating br0: port 2(wl0) entering forwarding state device wl0.1 is not a slave of br0 device wl0.2 is not a slave of br0 device wl0.3 is not a slave of br0 Reaped 415 UPnP::upnp_init:UPnP daemon is ready to run UPnP::upnp_request_handler:UPNP_CMD_DEV_ADD UPnP::upnp_device_attach:br0: attach WFADevice.xml UPnP::upnp_request_handler:Device command.


Tags

How to add tags

, , , ,
This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2025/11/11 16:06
  • by rikka0w0